CUPS problem - managing jobs from LAN

I want to allow anyone on our LAN to resubmit a job , but not to do any other administration type tasks.
going tohttp://ls.a.c:631/
works fine, though it allows users to go into admin.
getting to the jobs (http://ls.a.c:631/jobs/) also works.